Its simplicity can make it dangerous

  • Hi,

    In general I like this plugin, it is easy to use. But it’s simplicity also makes it “dangerous”:

    When you activate the plugin, it immediately redirects to /login (as default) and when you switch to use a specific key in the url like /blabla=abcd and save it it remembers this url (or the redirect) even when you DEACTIVATE the plugin! Very easy to miss this fact. Just imagine you activated it, but you get interrupted and have no time to see that your configuration is already changed to an unknown (to you) login page.

    Therefore, suggestions:

    • 1. Give it an “activate ON / OFF” switch in the settings and make “OFF” the default
    • 2. when you deactivate the plugin, deactivate also the key in the URL and the redirection.

      • Right now I have no idea how to get rid of it in case I would want to go back to the normal wp-login. Could I just uninstall it?

  • The topic ‘Its simplicity can make it dangerous’ is closed to new replies.